Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: PfIZ1ccsxb6w/e9FNdbieCh3+6L4H68c0nfmhMElYiM=
Subject key identifier: 65:D1:DC:00:A8:6A:B4:75:AD:BD:07:C3:C0:DA:9B:33:72:EA:C5:6C
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 019F909113C970B9D09D57CA8F5159987D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 20:00:54 +0000
Manifest this update: Thu 23 Jul 2026 20:00:54 +0000
Manifest next update: Fri 24 Jul 2026 20:00:54 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: LxlEbQk9RwYMNgO6rvZJS78COXLX/zU3yBq/B0YcHIY=)
2: WHq-HnXpka6rpneJHgIs142O010.roa (hash: vIU6EqtRsEPuNd3qk5b/5wKThF8xlpJsgvmp83AjeXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:13:c9:70:b9:d0:9d:57:ca:8f:51:59:98:7d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Jul 23 20:00:54 2026 GMT
Not After : Jul 24 20:00:54 2026 GMT
Subject: CN=65d1dc00a86ab475adbd07c3c0da9b3372eac56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:16:e1:a8:a8:cc:9c:4a:ee:49:c4:0d:06:
33:7b:78:cc:78:d9:f8:12:34:ac:e6:25:34:b6:93:
96:fb:e5:ee:29:31:a6:f5:a3:68:49:96:ac:ed:e4:
99:5d:f7:8a:ec:6f:c5:73:3a:f0:23:b4:ba:de:8e:
93:9e:85:6c:09:b6:72:84:82:7f:c3:48:78:9f:ea:
93:1a:e9:23:3d:87:cd:16:f7:84:7e:39:d4:e0:44:
48:16:3a:1c:5e:d6:5f:09:69:35:01:f0:b5:72:b9:
00:6f:26:b9:17:9d:59:95:04:93:18:1a:f6:b5:f1:
40:50:b5:f7:79:b2:70:68:ff:32:55:2e:8b:64:d2:
d7:48:fb:36:7c:ca:f5:79:10:5e:7b:e0:20:94:95:
2f:a8:98:37:8f:06:bb:08:a1:d0:ed:6b:66:9e:60:
f1:38:59:a7:e0:87:22:c2:2c:92:5c:77:82:b6:75:
84:55:c5:dc:86:37:5c:b9:8d:f8:f0:57:8b:a2:67:
ff:fe:50:1b:28:82:a9:99:db:cf:e2:c7:75:de:18:
1f:81:35:18:e2:d5:cc:99:77:e1:d6:42:e6:2b:40:
79:c2:11:a5:03:70:7f:b5:2f:e9:03:8a:7b:cd:94:
12:11:a6:b3:85:37:99:2a:40:b8:b8:0d:91:27:cb:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:DC:00:A8:6A:B4:75:AD:BD:07:C3:C0:DA:9B:33:72:EA:C5:6C
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:af:74:5e:3d:01:d2:0e:e8:ab:51:f0:1e:50:77:d8:7c:e8:
65:c4:95:d0:bf:06:72:50:15:9b:05:45:2e:7f:13:67:f2:43:
34:d2:33:fe:f4:fb:c5:99:f6:de:a4:bd:0f:60:b1:a4:bc:2b:
e5:41:9a:aa:5a:77:1a:37:42:57:bf:15:89:55:c0:12:d8:a5:
b8:93:34:5c:be:6e:02:88:78:a8:60:05:3f:cd:59:b7:31:da:
7d:fa:14:64:e6:4b:9b:87:ec:8d:cc:44:f2:bf:cc:39:ec:bf:
54:62:12:b5:b9:59:53:61:92:d3:3f:1a:8a:55:8c:b5:c2:06:
ac:f2:e9:a4:c0:bb:2a:a4:54:6d:e3:90:60:ad:9b:34:7f:50:
dc:97:49:60:33:cb:e1:6b:b0:5c:6c:16:25:24:51:a8:65:40:
51:55:52:02:f7:75:f1:6a:20:07:5a:9d:39:00:97:44:0e:96:
e9:64:88:8e:ed:63:09:2a:13:62:dd:9b:48:73:5b:fa:ce:f6:
5d:da:c9:7d:5a:18:e5:52:20:8c:a6:32:4e:ee:dd:c8:be:ab:
9b:ec:ab:48:8d:34:13:03:41:c4:cb:a5:12:ef:2b:29:29:8b:
55:c6:bf:ef:be:88:49:03:94:58:8f:2b:12:59:81:08:a4:51:
54:cb:3d:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkRPJcLnQnVfKj1FZmH0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDkwZmJhNjYzYjA3MmJiNTRjYzdkNDllODhhMDM4MDM3
NGNiNmUwHhcNMjYwNzIzMjAwMDU0WhcNMjYwNzI0MjAwMDU0WjAzMTEwLwYDVQQD
Eyg2NWQxZGMwMGE4NmFiNDc1YWRiZDA3YzNjMGRhOWIzMzcyZWFjNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmccW4aiozJxK7knEDQYze3jMeNn4
EjSs5iU0tpOW++XuKTGm9aNoSZas7eSZXfeK7G/FczrwI7S63o6TnoVsCbZyhIJ/
w0h4n+qTGukjPYfNFveEfjnU4ERIFjocXtZfCWk1AfC1crkAbya5F51ZlQSTGBr2
tfFAULX3ebJwaP8yVS6LZNLXSPs2fMr1eRBee+AglJUvqJg3jwa7CKHQ7WtmnmDx
OFmn4IciwiySXHeCtnWEVcXchjdcuY348FeLomf//lAbKIKpmdvP4sd13hgfgTUY
4tXMmXfh1kLmK0B5whGlA3B/tS/pA4p7zZQSEaazhTeZKkC4uA2RJ8tOBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXR3ACoarR1rb0Hw8DamzNy6sVsMB8GA1UdIwQY
MBaAFAcJD7pmOwcrtUzH1J6IoDgDdMtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzct
MDFhMjhhNzZjY2Y0LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzctMDFhMjhhNzZjY2Y0
LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAka90Xj0B
0g7oq1HwHlB32HzoZcSV0L8GclAVmwVFLn8TZ/JDNNIz/vT7xZn23qS9D2CxpLwr
5UGaqlp3GjdCV78ViVXAEtiluJM0XL5uAoh4qGAFP81ZtzHaffoUZOZLm4fsjcxE
8r/MOey/VGIStblZU2GS0z8ailWMtcIGrPLppMC7KqRUbeOQYK2bNH9Q3JdJYDPL
4WuwXGwWJSRRqGVAUVVSAvd18WogB1qdOQCXRA6W6WSIju1jCSoTYt2bSHNb+s72
XdrJfVoY5VIgjKYyTu7dyL6rm+yrSI00EwNBxMulEu8rKSmLVca/776ISQOUWI8r
ElmBCKRRVMs9Ug==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:57 2026 by rpki-client